Information processing system, information processing method, image processing apparatus, program, and recording medium

ABSTRACT

Text data is extracted from image data read by an image reader. Log data containing the extracted text data is generated. The generated log data is stored in a log management server.

CROSS REFERENCE OF RELATED APPLICATIONS

This application is a Continuation of U.S. patent application Ser. No.10/985,748 filed Nov. 9, 2004 which claims priority from Japanese PatentApplication No. 2003-392782 filed Nov. 21, 2003, both of which arehereby incorporated by reference herein.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to an information processing system andimage processing apparatus for efficiently managing read image data, aninformation processing method for use therewith, a program thereof, anda recording medium thereof.

2. Description of the Related Art

As image processing apparatuses have become popular, it has becomepossible for anybody to easily copy and transmit documents. However,although the convenience has improved for a user, significant problemsregarding information leakage from copying and transmitting secretdocuments have occurred. As countermeasures against such problems, thereis an image processing apparatus for storing all the read image data ina recording device during copying and transmission. As a result, amanager can trace a leaked document by checking the image data in theimage processing apparatus that read the information of the leakeddocument with regard to when, where, and how the document was processed.

Additionally, there is an image processing apparatus including means, inwhich image patterns of paper money, valuable securities, and the likeare recorded in advance for the purpose of preventing counterfeitthereof, for performing processing on an output image so as to verifythat it is a copy when the features of the read image data are extractedand it is determined to be a copy prohibited document, for stopping acopying operation, and for issuing a notification (see, for example,Japanese Patent Laid-Open No. 6-270477).

However, in the conventional image processing apparatus, since all ofthe read image data is stored in a recording device, when informationleakage occurs, the manager needs to check the image data sequentiallyto trace when, where, and how it was processed, and a significant amountof time is required.

In the image processing apparatus for extracting the features of theread image data and determining whether it is a copy prohibiteddocument, since patterns of copy prohibited documents must be stored inadvance in the image processing apparatus, types of documents desired tobe monitored are limited, and the documents cannot be changed easily.

Against such a background, there has been a demand for an imageprocessing apparatus that is capable of easily examining read image dataunder various monitoring conditions.

SUMMARY OF THE INVENTION

Accordingly, the present invention provides an information processingsystem capable of easily monitoring when, where, and how read image datawas processed, an information processing method for use therewith, aprogram therefor, and a recording medium therefor.

The present invention generates log data for reading a documentincluding first text data extracted from first image data read by animage reader.

The present invention provides a second storing controller causing tostore the first image data into a second storing unit, and to generatethe log data including location information indicating a location ofstoring the first image data in the second storing unit. In a case ofdetecting location information, second image data corresponding to thedocument based on the image data read by the first image reader, the logdata generated includes the location information of the second imagedata without storing the first image data into the second storing unit.

Log data including second text data is generated instead of the firsttext data if the size (amount) of the first text data is not greaterthan a predetermined threshold value.

In accordance with an aspect of the present invention, an informationprocessing system includes: an extractor for extracting first text datafrom first image data obtained by reading a document with an imagereader; a log data generator for generating log data that shows a logrelated to a process for reading the document by the image reader andthat contains the first text data extracted by the extractor; and afirst storing controller for storing the log data generated by the logdata generator in a first storage unit.

In accordance with another aspect of the present invention, aninformation processing method for use with an information processingapparatus includes: extracting text data from image data read by animage reader; generating log data that shows a log related to a processfor reading the image data by the image reader and that contains thetext data that was extracted; and storing the log data that wasgenerated in a storage device.

In accordance with another aspect of the present invention, an imageprocessing apparatus includes: an image reader for reading a documentand generating first image data; an extractor for extracting first textdata from the first image data; a log data generator for generating logdata that shows a log related to a process for reading the document databy the image reader and that contains the first text data extracted bythe extractor; and a transmitter for transmitting the log data generatedby the log data generator to a first external server.

Further features and advantages of the present invention will becomeapparent from the following description of the preferred embodimentswith reference to the attached drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 shows the basic system configuration according to first andsecond embodiments of the present invention.

FIG. 2 shows the system configuration of a copier according to the firstand second embodiments of the present invention.

FIG. 3 shows an example of the configuration in which the copier writesimage data to a storage server and log data to a log management server.

FIG. 4 is a flowchart showing the operation of the copier according tothe first embodiment of the present invention.

FIG. 5 shows an example of a log file recorded in the log managementserver in the first and second embodiments of the present invention.

FIG. 6 shows the meanings of entries of log data recorded in the logmanagement server in the first and second embodiments of the presentinvention.

FIGS. 7-1 to 7-2 is a flowchart showing the operation of the copieraccording to the second embodiment of the present invention.

FIG. 8 shows an example of a document in which the URI of the originaldata can be detected from read image data in the second embodiment ofthe present invention.

DESCRIPTION OF THE EMBODIMENTS

Exemplary embodiments of the present invention are described below indetail with reference to the attached drawings.

First Embodiment

A first embodiment of the present invention is described first.

FIG. 1 shows the basic system configuration according to the firstembodiment of the present invention.

A copier 1001 is a device for reading a document, copying it, andtransmitting it to various devices. A facsimile 1002 receives the dataread by the copier 1001 via a public switched network 1008, and printsthe data. A database/mail server 1003 is a computer in which anapplication for storing data read by the copier 1001 operates.

A client computer 1004 is connected to the database/mail server 1003,and downloads and displays the stored data. A storage server 1005 is anaudit storage device for storing all the image data read by the copier1001. A log management server 1006 records the log of copying andtransmission jobs in the copier 1001. An Ethernet 1007 is a network forinterconnecting the copier 1001, the database/mail server 1003, theclient computer 1004, the storage server 1005, and the log managementserver 1006.

FIG. 2 is a block diagram showing the system configuration of the copier1001 in this embodiment. A controller unit 2000 is a controller that isconnected to a scanner 2070, which is an image input device, and aprinter 2095, which is an image output device. The controller unit 2000is also connected to a LAN 2011 and a public switched network (WAN) 2051so that image information and device information are input and output. ACPU (Central Processing Unit) 2001 is a controller for centrallycontrolling the system. A RAM (Random-Access Memory) 2002 is a systemwork memory for the CPU 2001 to operate, and is also an image memory fortemporarily storing image data.

A ROM (Read-Only Memory) 2003 is a boot ROM in which the boot programfor the system is stored. An HDD 2004 is a hard disk drive for storingsystem software and image data. An operation section interface 2006 isan interface section with an operation section (UI) 2012 having a touchpanel, and outputs, to the operation section 2012, the image data to bedisplayed in the operation section 2012. The operation section interface2006 also serves to transmit, to the CPU 2001, the information inputfrom the operation section 2012 input by a user of this system.

A network interface 2010, which is connected to the LAN 2011, inputs andoutputs information. A modem 2050, which is connected to the publicswitched network (WAN) 2051, inputs and outputs information. Theabove-described devices are connected to a system bus 2007. An image businterface 2005 is a bus bridge, through which the system bus 2007 isconnected to an image bus 2008 for transferring image data at a highspeed, the bus bridge converting the data structure. The image bus 2008is formed by a PCI bus or an IEEE 1394 bus. Devices connected to theimage bus 2008 are described below.

A raster image processor (RIP) 2060 converts PDL (Page DescriptionLanguage) code into a bit-map image. A device interface section 2020connects the scanner 2070 and the printer 2095, which are imageinput/output devices, to the controller unit 2000, and performssynchronous/asynchronous conversion of image data. A scanner imageprocessing section 2080 corrects, processes, and edits the input imagedata. A printer image processing section 2090 performs a correction ofthe printer, a resolution conversion thereof, etc., on the print outputimage data.

An image rotation section 2030 rotates image data. An image compressionsection 2040 performs a compression/decompression process of JPEG onmulti-valued image data and a compression/decompression process of JBIG(Joint Bi-level Image Experts Group), MMR (Modified Modified READ), andMH (Modified Huffman) on binary image data. In an IC card slot 2100, byinputting an appropriate PIN (Personal Identifier Number) code after anIC card medium is inserted, it becomes possible to input or output a keyused for encryption and decryption.

An encryption/decryption processing section 2110 is a hardwareaccelerator board for performing a data encryption/decryption process byusing the key of the IC card slot 2100. An OCR/OMR (optical characterrecognition/optical mark recognition) processing section 2111 performs aprocess for decrypting character information and two-dimensional barcodes contained in the image data and converting them into charactercodes.

FIG. 3 shows an example of the configuration in which the copier 1001writes image data to the storage server 1005 and writes log data to thelog management server 1006.

In the configuration shown in FIG. 3, the Ethernet is used, and whenimage data is stored from the copier 1001 into the storage server 1005,protocols of HTTP (Hyper Text Transfer Protocol), FTP (File TransferProtocol), and SMB (Server Message Block) are used. However, anyexisting protocol may be used as long as it is a protocol capable oftransferring data, and an encryption process may be performed as needed.

For writing log data from the copier 1001 to the log management server1006, syslog is used. However, another existing logging protocol may beused. In this embodiment, the copier 1001, the storage server 1005, andthe log management server 1006 are formed as individual entities, butany or all of them may be combined. The setting information required toaccess the storage server 1005 and the log management server 1006 isprotected so that only the system administrator of the copier 1001 canset it.

FIG. 4 is a flowchart showing processing in which all the read imagedata is stored in a specified storage device and recording, the URI(Uniform Resource Identifier) and text data contained in the image dataare recorded in log data.

In step S4001, the user places a document in an automatic documentfeeding device or a document holder of the scanner 2070, and performsthe setting of the number of copies and the transmission destination inaccordance with a desired purpose such as copying and transmission.Thereafter, the user instructs the starting of job execution. Next, instep S4002, the document is read using the scanner 2070, and thegenerated image data is sequentially recorded for each page in the HDD2004. After the reading is completed up to the final page, the processproceeds to step S4003, where the image data recorded in the HDD 2004 isstored in the specified storage server 1005.

The storage into the storage server 1005 may be performed in such amanner that a plurality of pages are stored individually, or after aplurality of pages are bound into one document, this is stored. Afterthe process of storage into the storage server 1005 is completed, instep S4004, the result of the storing process is verified. If thestorage process did not succeed, the process proceeds to step S4019,where the fact that an abnormal state has occurred is displayed in theoperation section 2012, and the job execution terminates abnormally.

On the other hand, if the storage process succeeded, the processproceeds to step S4005, where the job type of execution job is set inthe log data. The job type in this embodiment indicates a function type,such as copy, facsimile, and scan. Next, in step S4006, it is determinedwhether or not the copier 1001 is set as in such a manner that the useris authenticated. When it is determined that the user is authenticated,the process proceeds to step S4007, where user information, for example,the user name and the user ID, is set in the log data. The process thenproceeds to step S4008.

On the other hand, if it is determined that the user is notauthenticated, the process directly proceeds to step S4008. In stepS4008, the URI of the image data stored in the storage server 1005 instep S4003 is set in the log data. In step S4009, by using the OCR/OMRprocessing section 2111, text data is extracted from the image datarecorded in the HDD 2004 in step S4009.

Next, in step S4010, it is determined whether or not the size of theextracted text data is greater than a threshold value. When it isdetermined that the size of the extracted text data is less than orequal to the predetermined threshold value, for example, the size isonly several bytes, the process proceeds to step S4011, where thethumbnail image data of the image data is generated. In the subsequentstep S4012, the generated thumbnail image data is encoded to text data,and the process then proceeds to step S4013. On the other hand, when itis determined in step S4010 that the size of the text data is greaterthan the predetermined threshold value, the process directly proceeds tostep S4013. In step S4013, the text data generated in step S4009 orS4012 is set in the log data. In step S4014, the log data is writteninto the predetermined log management server 1006.

In this embodiment, when it is determined in step S4010 that the size ofthe extracted text data is less than or equal to the predeterminedthreshold value, the text data obtained by encoding the thumbnail imagedata of the image data is set in the log data, so that a search can beperformed for the desired log data from the text data. As anotherexample of the configuration, the text data is not generated from thethumbnail image data, and the thumbnail image data itself may be storedin the storage server 1005 in such a manner as to be associated with thestorage URI of the log data in the log management server 1006. Thismakes it possible to make a display of a list of thumbnail images in theclient computer 1004 so that a search can be performed for desired logdata by selecting the thumbnail image. In this case, the text dataextracted in step S4009 is not set in the log data.

After the recording process in the log management server 1006 iscompleted, in step S4015, the result of the recording process isverified. When it succeeded, the process proceeds to step S4016, wherethe job specified by the user in step S4001 is executed. Then, in stepS4017, the job execution terminates normally. If it did not succeed, theprocess proceeds to step S4018, where the image data stored in stepS4003 is deleted. In the subsequent step S4019, the fact that anabnormal state has occurred is displayed in the operation section 2012,and the job execution terminates abnormally.

FIG. 5 shows an example of a log file recorded in the log managementserver 1006 in this embodiment.

In the log management server 1006, in accordance with the flowchart ofFIG. 4, a log writing instruction is received from the copier 1001 inunits of jobs, and the log data of one record is generated in units ofjobs. A log file made up of such log data is stored for a fixed periodof time in the log management server 1006 so that it can be used for anaudit.

FIG. 6 shows the meanings of entries of log data recorded in the logmanagement server 1006 in this embodiment.

Date and time 6001 indicates date and time when the log writingoccurred. A device address 6002 is an IP address or a host name of adevice that executed a job. A program name 6003 is the name of a programthat wrote a log. A job type 6004 indicates a function type, such ascopy, facsimile, or scan. A user name 6005 indicates a user namecomposed of a character string that identifies the user who executed thejob, or a user ID composed of a numerical value. An image data storageURI 6006 is the URI at which the read image data is stored or the URI ofthe original data of the document. By accessing this URI, it becomespossible to access the image data of the read document. Text data 6007is text data extracted by performing an OCR/OMR process on the readimage data.

As described above, according to the first embodiment of the presentinvention, it is possible to record the URI of the read image data andthe text data contained in the image data as the log data of the logmanagement server. As a result, it becomes possible to search for thelog data containing the text code indicating the content of the readimage data by using a character string. Thus, it is possible to easilyrealize monitoring of when, where, and how the read document wasprocessed under various monitoring conditions.

Furthermore, according to the first embodiment of the present invention,as a result of providing a method for authentication for identifying andconfirming the user during operation, it is possible to specify the userwho has executed the job. As a result of providing a method forcollectively recording the URI at which the user information and theimage data are stored and the text data as one log data in the logmanagement server in accordance with a predetermined protocol, itbecomes possible to check as to who has performed the operation.

Second Embodiment

A second embodiment of the present invention is described next.

The basic system configuration of the second embodiment is identical tothose of the first embodiment shown in FIGS. 1, 2, and 3. Accordingly,details thereof are omitted.

FIGS. 7-1 and 7-2 are a flowchart showing processing in this embodiment.In this embodiment, when the URI of the original data (the same data asthe above-described image data) can be detected from the read imagedata, storage into the storage server 1005 is not performed, and the URIand the text data contained in the image data are recorded in the logdata; when the URI of the original data cannot be detected, all the readimage data is stored in the specified storage server 1005, and the URIand the text data contained in the image data are recorded in the logdata.

In step S7001, the user places a document in an automatic documentfeeding device or a document holder of the scanner 2070, and performssetting of the number of copies and the transmission destination inaccordance with a desired purpose such as copying and transmission.Thereafter, the user instructs the starting of job execution. Next, instep S7002, the document is read using the scanner 2070, and thegenerated image data is sequentially recorded for each page in the HDD2004. After the reading is completed up to the final page, the processproceeds to step S7003, where it is determined whether or not the URI ofthe original data of the read document should be detected.

When the URI of the original data should be detected, the processproceeds to step S7004, where the URI of the original data is searchedfor by using the OCR/OMR processing section 2111. In step S7005, it isdetermined whether or not the URI searching process for the originaldata has succeeded. When it has succeeded, the process proceeds to stepS7006, where the storage URI mode is set as a “reference”. The processthen proceeds to step S7007.

On the other hand, when it is determined in step S7003 that the URI ofthe original data should not be detected or when it is determined instep S7005 that the URI searching process for the original data did notsucceed, the process proceeds to step S7008, where the image datarecorded in the HDD 2004 is stored in the specified storage server 1005.The storage into the storage server 1005 may be performed in such amanner that a plurality of pages are stored individually, or after aplurality of pages are bound into one document, the bound document isstored.

After the storing process in the storage server 1005 is completed, instep S7009, the result of the storing process is verified. If the resultis not a success, the process proceeds to step S7025, where the factthat an abnormal state has occurred is displayed in the operationsection 2012, and the job execution terminates abnormally. On the otherhand, if the result is a success, the process proceeds to step S7010,where the storage URI mode is set as an “entity” and the processproceeds to step S7007.

In step S7007, the job type of the job execution is set in the log data.The job type in this embodiment indicates a function type, such as copy,facsimile, and scan. Next, in step S7011, it is determined whether ornot the copier 1001 is set in such a manner that the user isauthenticated. When it is determined that the user is authenticated, theprocess proceeds to step S7012, where user information, such as the username and the user ID, is set in the log data. The process then proceedsto step S7013.

On the other hand, if it is determined that the user is notauthenticated, the process directly proceeds to step S7013. In stepS7013, if the storage URI mode is a reference, the URI of the originaldata detected in step S7004 is set in the log data; and if the storageURI mode is an entity, the URI of the image data stored in the storageserver 1005 in step S7008 is set in the log data. In step S7014, byusing the OCR/OMR processing section 2111, text data is extracted fromthe image data recorded in the HDD 2004 in step S7014.

Next, in step S7015, it is determined whether or not the size of theextracted text data is greater than a threshold value. When it isdetermined that the size of the extracted text data is less than orequal to the predetermined threshold value, for example, the size isonly several bytes, the process proceeds to step S7016, where thethumbnail image data of the image data is generated. In the subsequentstep S7017, the generated thumbnail image data is encoded to text data,and the process then proceeds to step S7018. On the other hand, when itis determined in step S7015 that the size of the text data is greaterthan the predetermined threshold value, the process directly proceeds tostep S7018. In step S7018, the text data generated in step S7014 orS7017 is set in the log data. In step S7019, the log data is writteninto the predetermined log management server 1006.

In this embodiment, when it is determined in step S7015 that the size ofthe extracted text data is less than or equal to the predeterminedthreshold value, the text data obtained by encoding the thumbnail imagedata of the image data is set in the log data, so that desired log datacan be searched for from the text data. As another example of theconfiguration, the text data is not generated from the thumbnail imagedata, and the thumbnail image data itself may be stored in the storageserver 1005 in such a manner as to be associated with the storagelocation of the corresponding log data in the corresponding logmanagement server 1006. This makes it possible to make a display of alist of thumbnail images in the client computer 1004 so that desired logdata can be searched for by selecting the thumbnail image. In this case,the text data extracted in step S7014 is not set in the log data.

After the recording process in the log management server 1006 iscompleted, in step S7020, the result of the recording process isverified. When the result is a success, the process proceeds to stepS7021, where the job specified in step S7001 by the user is executed.Then, in step S7022, the job execution terminates normally. On the otherhand, if the result is not a success, the process proceeds to stepS7023, where it is determined whether the storage URI mode is an entityor a reference. When it is determined that the storage URI mode is anentity, the process proceeds to step S7024, where the data of thestorage URI, that is, the image data stored in step S7008, is deleted,and the process then proceeds to step S7025. When it is determined thatthe storage URI mode is not an entity, the process directly proceeds tostep S7025, where the fact that an abnormal state has occurred isdisplayed in the operation section 2012, and the job executionterminates abnormally.

The example of the log file recorded in the log management server 1006of this embodiment, and the meanings of the entries recorded in the logmanagement server 1006 are identical to those of the example shown inFIGS. 5 and 6. Accordingly, details thereof are omitted.

FIG. 8 shows an example of a document in which the URI of the originaldata can be detected from read image data in this embodiment.

In the upper right portion of this document, a two-dimensional bar code8001 (QR code symbol) is recorded. In this embodiment, information (URI)indicating the location of electronic data of a paper document isrecorded in the two-dimensional bar code 8001. After the two-dimensionalbar code 8001 is processed, by accessing the recorded URI, it ispossible to confirm the original data.

In this embodiment, it is possible to further provide a method for thesystem administrator to selectively activate or deactivate a detectingunit of the URI of the original data. As a result, even in the case of adocument in which the URI of the original data can be detected, itbecomes possible to perform management so that the read image data isalways stored in a specified storage device in accordance with themanagement policy.

As described above, according to the second embodiment of the presentinvention, the process for storing the read image data in a specifiedstorage device can be omitted, and the URI of the original data as analternative of the URI of the read image data and the text datacontained in the image data can be recorded as the log data of the logmanagement server.

Furthermore, according to the second embodiment of the presentinvention, when the URI of the original data cannot be detected from theread image data, as a result of providing a mechanism for storing all ofthe read image data in a specified storage device and for recording, asone log data, the URI at which the image data is stored and the textdata in the log management server in accordance with a predeterminedprotocol, it becomes possible to record the URI of the read image dataand the text data contained in the image data as the log data of the logmanagement server.

Furthermore, according to the second embodiment of the presentinvention, as a result of providing an authentication mechanism foridentifying and confirming the user during operation, it is possible tospecify the user that has performed the job. As a result of providing amechanism for collectively recording, as one log data, the userinformation, the URI at which the image data is stored, and the textdata in the log management server in accordance with a predeterminedprotocol, it is possible to check who has performed the operation.

A storage medium on which program code (software) which realizes thefunctions of the above-described embodiments may be supplied to a systemor an apparatus, and the computer (or the CPU or the MPU) of the systemor the apparatus reads the program code stored on the storage medium,and executes it.

For the storage medium for supplying the program code, for example, aflexible disk, a hard disk, an optical disk, a magneto-optical disk, acompact disk-read-only memory (CD-ROM), a compact disk-recordable(CD-R), a magnetic tape, a non-volatile memory card, a ROM, etc., can beused.

Furthermore, beside the above-described functions of the above-describedembodiments are realized by executing the program code which is read bythe computer, the present invention includes a case where the OS (BasicSystem or Operating System) running on the computer performs part or theentirety of actual processing in accordance with instructions of theprogram code, thereby realizing the functions of the above-describedembodiments.

Furthermore, the present invention also includes a case where, after theprogram code read from the storage medium is written into a memoryprovided in a function expansion board which is inserted into thecomputer or in a function expansion unit which is connected to thecomputer, the CPU or the like provided in the function expansion boardor the function expansion unit performs part or the entirety of actualprocessing in accordance with instructions of the program code, therebyrealizing the functions of the above-described embodiments.

While the present invention has been described with reference to whatare presently considered to be the preferred embodiments, it is to beunderstood that the invention is not limited to the disclosedembodiments. On the contrary, the invention is intended to cover variousmodifications and equivalent arrangements included within the spirit andscope of the appended claims. The scope of the following claims is to beaccorded the broadest interpretation so as to encompass all suchmodifications and equivalent structures and functions.

1. An information processing system comprising: an input unit forinputting image data on which an image processing job for causingexecution of an image output process is to be performed; a verificationdata generator for generating verification data based on the image data;a log data generator for generating log data to be associated with theverification data; a storing controller for storing, in at least onestorage unit, the verification data and the log data to be associatedwith the verification data; a verifying unit for determining averification result based on whether the storing controller has storedthe verification data in the at least one storage unit, wherein theverification result is positive if the verification data is stored inthe at least one storage unit and the verification result is negative ifthe verification data is not stored in the at least one storage unit;and a controller for causing execution of the image output process basedon the image data in response to the verification result being positive,and for causing execution of the image processing job to be terminatedwithout causing execution of the image output process based on the imagedata in response to the verification result being negative.
 2. Theinformation processing system according to to claim 1, furthercomprising an image storing controller for storing the image data in animage storing unit, wherein the log data generated by the log datagenerator includes storage location information identifying a storagelocation of the image stored in the image stored unit.
 3. Theinformation processing system according to claim 1, wherein the log datacomprises identification information of a user that operated a processfor reading the image data.
 4. The information processing systemaccording to claim 1, wherein the log data comprises time informationindicating when the image processing job with regard to the image datawas performed.
 5. The information processing system according to claim1, wherein the log data comprises identification information of a devicewhich performs the image processing job.
 6. The information processingsystem according to claim 1, wherein the log data comprisesidentification information of the image processing job performed withregard to the image data.
 7. An information processing method for usewith an information processing apparatus, the information processingmethod comprising: inputting image data on which an image processing jobfor causing execution of an image output process is to be performed;generating verification data based on the image data; generating logdata to be associated with the verification data; storing, in at leastone storage unit, the verification data and the log data to beassociated with the verification data; determining a verification resultbased on whether the verification data has been stored in the at leastone storage unit, wherein the verification result is positive if theverification data is stored in the at least one storage unit and theverification result is negative if the verification data is not storedin the at least one storage unit; and controlling the informationprocessing apparatus to cause execution of the image output processbased on the image data in response to the verification result beingpositive, and causing execution of the image processing job to beterminated without causing execution of the image output process inresponse to the verification result being negative.
 8. A non-transitorycomputer-readable recording medium having recorded thereon a program forenabling a computer to perform the information processing methodaccording to claim
 7. 9. An information processing apparatus comprising:an input unit for inputting image data on which an image processing jobfor causing execution of an image output process is to be performed; averification data generator for generating verification data based onthe image data; a log data generator for generating log data to beassociated with the verification data; a controller for controlling theinformation processing apparatus to execute the output process based onthe image data in response to a result that the storing controller hasstored the verification data in the at least one storage unit, and toterminate execution of the image processing job without causingexecution of the image output process, in response to a result that thestoring controller has not stored the verification data in the at leastone storage unit; and a transmitter for transmitting the log datagenerated by the log data generator to an external server.
 10. Theinformation processing system according to claim 1, wherein theverifying unit verifies whether the storing controller has stored theverification data and the log data in the at least one storage unit,wherein the verification result is positive if the verification data andthe log data is stored in the at least one storage unit and theverification result is negative if at least one of the verification dataand the log data is not stored in the at least one storage unit.
 11. Theinformation processing method according to claim 7, wherein theverifying comprises verifying whether the verification data and the logdata is stored in the at least one storage unit, wherein theverification result is positive if the verification data and the logdata is stored in the at least one storage unit and the verificationresult is negative if at least one of the verification data and the logdata is not stored in the at least one storage unit.
 12. The informationprocessing apparatus according to claim 9, wherein the verifying unitverifies whether the storing controller has stored the verification dataand the log data in the at least one storage unit, wherein theverification result is positive if the verification data and the logdata is stored in the at least one storage unit and the verificationresult is negative if at least one of the verification data and the logdata is not stored in the at least one storage unit.
 13. The informationprocessing method according to claim 7, further comprising storing theimage data in an image storage unit, wherein the log data includesstorage location information identifying a storage location of the imagedata stored in the image storage unit.
 14. The information processingapparatus according to claim 9, further comprising an image storingcontroller for storing the image data in an image storage unit, whereinthe log data generated by the log data generator includes storagelocation information identifying a storage location of the image datastored in the image storage unit.